RE: Career Choice

From: dave kleiman (dave_at_isecureu.com)
Date: 03/09/05

  • Next message: louie: "Re: see which programs are opening ports"
    To: <security-basics@securityfocus.com>
    Date: Tue, 8 Mar 2005 22:11:53 -0500
    
    

    Richard,

    One thing you can definitely do if your goal is Forensics. Find your Local
    Sheriff's / Police department that has Computer Crimes Unit and volunteer
    your free time.
    Trust me they can use the help, most of them have a work load that is beyond
    belief. Almost all PD and SO's have volunteer programs. It will give you
    the opportunity to see the skill sets you will need. You will of course be
    limited to what you are allowed to be involved in, but experience is
    experience, I volunteer 100-200 hours a year to my local Sheriff's and
    States Attorneys office and it is as much a benefit for me as it is for
    them.

    Regards,
    ___________________________________________________
    Dave Kleiman, CIFI, CISM, CISSP, ISSAP, ISSMP, MCSE
    www.SecurityBreachResponse.com
    www.ComputerForensicInvestigations.com

    -----Original Message-----
    From: Joseph Forbes [mailto:jftitan@gmail.com]
    Sent: Tuesday, March 08, 2005 20:19
    To: Britton, Jeff B.
    Cc: security-basics@securityfocus.com
    Subject: Re: Career Choice

    Kirk,

      I will second Britton's thoughts on what will be needed of you once you
    graduate from school. I can also admit that it is true that the two options
    available to you are real. Either have a very nice resume that shows that
    you have spent your time wise, and well during school within the security
    field. OR know someone within the field to give you the heads up on a
    opening within the job market, or company needing administrators. I have
    been in corporate scale network solutions for over five years, and I am just
    now finishing up my Bachlers degree in Network Security. Of course I have
    been a fortunate person within my teens to already be involved with
    technology. I started young, and I have a resume to show for it.

      If your not already working for a company as a "lowly" tech, then I
    suggest to get your feet wet and get into it. Course, if your already in a
    high paying job, and making the choice to expand your horizon, then stick
    with your job, however start volunteering for anything technical/network
    related.

      If your in San Antonio (which I would bet not) then I can offer a Intern
    position... just follow the signature.

    On Tue, 8 Mar 2005 13:11:42 -0500, Britton, Jeff B.
    <JBBritton@lmus.leggmason.com> wrote:
    > I've been in security for appx 2 years now, and I can't begin to tell
    > you how much programming experience helps. An overall programming
    > language class is critical - to understand the building blocks of all
    > languages, both sequential and object oriented.
    >
    > Not only do you become capable of automating many parts of your job
    > (which in turn saves time and $$...something every manager likes to
    > see) but you are also able to get a much better handle on specific
    > vulnerabilies/expoits and how they directly affect whatever you are
    investigating.
    >
    > Be very careful when you get into MIS or CIS... I was a COSC major and
    > can tell you that CIS and MIS are much broader degree's, and for lack
    > of a better term, much easier than COSC or similar. If you want to
    > break into the security industry right out of school, you'll probably
    > need one of two things...
    > 1. A darn impressive resume
    > 2. An inside contact to get you a job
    >
    > Best of luck.
    >
    >
    > -----Original Message-----
    > From: Richard Kirk [mailto:saviente@gmail.com]
    > Sent: Tuesday, March 08, 2005 8:10 AM
    > To: security-basics@securityfocus.com
    > Subject: Career Choice
    >
    > I am currently a student at DeVry University studding Network
    > Communications Management. My true concentration is in security
    > forensics.
    >
    > In any case the more I looking into vulnerabilities and network flaws
    > the issues come from within the programming of the
    > application/protocol etc. and most assaults use multiple programming
    > languages to execute these attacks.
    >
    > I have two questions, the first is should I be learning how to
    > program? My current studies have only one programming language course
    > (Intro to Java). Second, will the Bachelors degree I'm getting help me
    > get into the field I'm looking for or should I change my major to
    > something else such as MIS or CIS?
    >
    > Thank You for your time
    > Best Regards
    >
    > IMPORTANT: The security of electronic mail sent through the Internet
    > is not guaranteed. Legg Mason therefore recommends that you do not
    > send confidential information to us via electronic mail, including
    > social security numbers, account numbers, and personal identification
    numbers.
    >
    > Delivery, and timely delivery, of electronic mail is also not
    > guaranteed. Legg Mason therefore recommends that you do not send
    > time-sensitive or action-oriented messages to us via electronic mail,
    > including authorization to "buy" or "sell" a security or instructions
    > to conduct any other financial transaction. Such requests, orders or
    > instructions will not be processed until Legg Mason can confirm your
    > instructions or obtain appropriate written documentation where necessary.
    >
    >

    --
    Joseph Forbes  "Don't Forget to Salt the Fries!"
    Network Security Administrator
    SwapNEtwork eXtreme, Inc.
    jftitan@satx.rr.com (jftitan@swapnetx.com) cell 210.834.3450 fax
    775.415.9280
    

  • Next message: louie: "Re: see which programs are opening ports"

    Relevant Pages

    • Re: Programming
      ... my understand was that the "guy" wanted to learn a language the ... is that they do not enforce any structured programming techniques. ... If you want to know what kind of security vulnerabilities ... The future of COBOL, well you should have done some checking ...
      (Security-Basics)
    • Re: Php invented by a former DECcie ?
      ... language with security tacked on afterwards that's the problem. ... Security is not a feature in programming languages. ... A language like Ada prevents various array index out of bounds ...
      (comp.os.vms)
    • Re: Privilege-escalation attacks on NT-based Windows are unfixable
      ... >> think language features will guarantee security (or program ... >> example) would wreck its use as a systems programming language. ... > I'm not saying they should "guarantee" security (as if that were ...
      (comp.os.ms-windows.nt.admin.security)
    • Re: Privilege-escalation attacks on NT-based Windows are unfixable
      ... >> think language features will guarantee security (or program ... >> example) would wreck its use as a systems programming language. ... > I'm not saying they should "guarantee" security (as if that were ...
      (comp.security.misc)
    • Re: Where do I go next?
      ... I'd learn a language, never use it, then forget it. ... What you need to *do* is to continue using whatever programming ... using that langauge, do some volunteer work. ... After the basic decoding of URLENCODED form contents, ...
      (comp.programming)